Ensure function app is integrated with a virtual network

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Audit from Azure Portal 1. Go to App Services or Function App. 2. Click the name of a function app. 3. Under Settings, click Networking. 4. Under Outbound traffic configuration, next to Virtual network integration, ensure that a virtual network and subnet name are displayed. 5. Repeat steps 1-4 for each function app. Audit from Azure CLI Run the following command to list function apps: az functionapp list For each function app, run the following command to get the virtual network subnet ID: az functionapp show --resource-group <resource-group-name> --name <function- app-name> --query "virtualNetworkSubnetId" Ensure that a virtual network subnet ID is returned. Audit from PowerShell Run the following command to list function apps: Get-AzFunctionApp Run the following command to get the function app in a resource group with a given name: $app = Get-AzFunctionApp -ResourceGroupName <resource-group-name> -Name <function-app-name> Run the following command to get the virtual network subnet ID: $app.virtualNetworkSubnetId Ensure that a virtual network subnet ID is returned. Repeat for each function app.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Remediate from Azure Portal 1. Go to App Services or Function App. 2. Click the name of a function app. 3. Under Settings, click Networking. 4. Under Outbound traffic configuration, next to Virtual network integration, click Not configured. 5. Click Add virtual network integration. 6. Select an existing App Service Plan connection, or select New connection and select a subscription, virtual network, and subnet. 7. Click Connect. 8. Repeat steps 1-7 for each function app requiring remediation. Remediate from Azure CLI For each function app requiring remediation, run the following command to integrate with a virtual network: az functionapp vnet-integration add --resource-group <resource-group-name> -- name <function-app-name> --vnet <virtual-network-name> --subnet <subnet-name> Remediate from PowerShell For each function app requiring remediation, run the following commands to integrate with a virtual network: Prepare parameters: $siteName = '<app-name>' $vNetResourceGroupName = '<virtual-network-resource-group-name>' $functionAppResourceGroupName = '<function-app-resource-group-name>' $vNetName = '<virtual-network-name>' $integrationSubnetName = '<subnet-name>' $vNetSubscriptionI...